Hi,
The field [geoip][country_name] writes a long value in memcached instead of only the string:
" DMZ1:ET
instead of:
DMZ1
I guess I am addressing it incorrectly. Is there any suggestion out there? Thanks!
<geoip {
database => "/usr/share/logstash/host/networkzones.mmdb"
fields => ["country_name"]
source => "host.ip"
}
memcached {
hosts => ["x.y.x.t:11211"]
set => { "[geoip][country_name]" => "%{host.ip}" }
}
/>